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HONORING OF ELECTRONIC COUPONS 

Field of the Invention 

The present invention relates to the field of electronic commerce, and 
5 particularly to so-called coupons, issued to buyers (i.e. customers or consumers) which 
are honored (or redeemed) by providers of goods or services (i.e. sellers). 

Background of the Invention 

Various sales promotion techniques or tools exist, such as prizes, contests, 
10 sweepstakes, games, free samples, product warranties, tie-in promotions, loyalty points, 
cross-sell, up-sell, premium memberships, card discounts, and gift certificates. These 
have been used for a long time to retain loyal customers, to increase the repurchase rate of 
occasional buyers, to attract new buyers, to manage inventory, and to gain market share. 
In more recent times, such techniques have been embodied in electronic form. All such 
15 techniques and tools, and others such as instant discount (which is similar to haggling or 
negotiations as occurs in conventional commerce), are herein referred to as "coupons". 

There are different classes of coupons based upon the identity issuing authority 
(i.e. manufacturer or retailer), whether the coupon is targeted to a set of potential 

20 customers or untargeted, and whether the number of coupons to be distributed is limited 
or unlimited. The various classes of coupons serve different purposes. For example, 
coupons issued by a manufacturer to a group of loyal customers in limited numbers could 
be intended to retain those loyal customers. Coupons issued by a manufacturer in 
untargeted mass distribution could be intended to attract buyers for a new product, and 

25 coupons issued by a retailer in untargeted limited distribution could be intended to attract 
customers to a retail outlet. 

Normally, when a manufacturer or a retailer issues coupons on a product or a 
service, a coupon is expected to be used only for that product or service. To save coupon 
30 creation and management costs, or to attract new buyers, a manufacturer or retailer may 
decide to honor the coupons issued by another party. This is referred to as cross-coupon 
honoring. 

In a generic form, electronic coupon systems must allow a buyer to collect 
35 electronic coupons while doing on-line shopping (or otherwise visiting an e-commerce 
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site) from various e-commerce sites, and to redeem these coupons on-line at any 
e-commerce site or physical store, satisfying the purchase conditions of the offer. 

Consider the case where 'A' and 'B' are two competing airlines, and Airline 'A' 
5 issues electronic discount coupons to its frequent flying customers. The Airline 'B', as a 
counter-strategy, announces that Airline "B" will also honor the coupons issued by the 
Airline 'A' (i.e. it will give discounts to the customers carrying the Airline 'A' coupon for 
buying Airline 'B' tickets). In the process. Airline 'B' stands to gain more than the 
Airline 'A', as it saves the coupon creation and management costs and is also able to 
10 target the competitor's loyal customers. Clearly, Airline 'A' would find cross-coupon 
honoring of its coupons undesirable and disadvantageous. Thus there is a need for 
cross-coupon honoring prevention solutions. 

From a different perspective, cross-coupon honoring is also disadvantageous to 
15 Airline "B". In particular, the redeeming e-commerce site (eg. Airline 'B') still has to 
verify that the electronic coupon is valid (i.e. it was indeed issued by the competitor), the 
terms and conditions have not been altered in some way, and the coupon has not already 
been redeemed. 

20 Thus, a need clearly exists for an improved system of honoring coupons 

overcoming or at least ameliorating one or more disadvantages of conventional 
approaches described hereinbefore. 

Summary of the Invention 

25 The gist of the invention is to charge an authentication fee for each positive 

coupon verification. Such a fee is reimbursed only to a legitimate redemption party. In 
this way a cross-coupon honoring party is discouraged. 

The invention discloses a method for the honoring of electronic coupons 
30 utilizing computing equipment, comprising the steps of: 

(a) an issuing party issuing an electronic coupon to a customer; 

(b) said customer presenting said coupon for redemption to a redemption 

party; 

(c) said redemption party transmitting said coupon to an authentication 
35 party for authentication; 
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(d) if authentic, said authentication party charging said redemption party a 
fee and passing that fee to said issuing party; and 

(e) said redemption party honoring said coupon for said customer and 
seeking reimbursement of said fee from said issuing party. 

5 

The invention further discloses an electronic coupon, having a plurality of data 
fields, including: 

a coupon identifier, x; 

a first one-way hash function field, f(x); and 
10 a secure signature field including a secure second one-way hash function, g(x). 

The invention yet further discloses an electronic commerce system, having 
electronic coupon issuance and redemptions, comprising: 

one or more coupon issuing parties issuing electronic coupons to customers; 
15 one or more redemption parties being electronically presented with said coupons 

for redemption; and 

an authentication party being in communication with said issuing parties and 
said redemption parties; 

and wherein, upon being presented with a said coupon, said redemption party 
20 transmits said coupon to said authentication party for authentication, and if authenticated, 
said authentication party charges said redemption party a fee and passes that fee to said 
issuing party, the redemption party then honoring said coupon and seeking reimbursement 
from said issuing party. 

25 Brief Description of the Drawings 

Embodiments of the invention will now be described with reference to the 
accompanying drawings, in which: 

Fig. 1 is a schematic block diagram of an on-line coupon verification system; 
Fig. 2 is a block flow diagram showing an electronic coupon issuance and 
30 redemption scenario 2. 

Detailed Description including Best Mode 

For the purpose of explanation, the specific example of electronic coupons 
issued by a manufacturer ("manufacturer coupons") will be given, however it is to be 
35 understood that the invention also applies to coupons issued by retailers ("retail 
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coupons"). A coupon-issuing party is known generically as an "issuing party". 

Fig. 1 is a schematic block diagram of a centralised on-line coupon verification 
system 10. A manufacturer 12 is conducting a coupon promotion. A customer 14 
receives one or more electronic coupons from the manufacturer 12 and seeks to redeem 
the coupon with an electronic Retailer 16, The customer 14 is offered a legitimate 
product/service that is being discounted by the issuing manufacturer's coupon. Fig. 1 
also shows the engagements between the parties, that occur via any suitable 
communications network. A Centralised Coupon Issuer and Authenticator (CCIA) 20 is a 
third party service whose role will now be described. 

The CCIA 20 provides coupon creation and verification service to a plurality of 
manufacturers for their promotions. It generates unforgeable blank coupons in response 
to a request from a manufacturer. The coupon has the following properties: 

a. When the coupon is presented to the CCIA at a later stage, the CCIA can 
recognize that the coupon was indeed produced by the CCIA. 

b. No other entity can produce such a stream of bytes, that will be recognized 
by the CCIA as a valid coupon, within a reasonable probability. 

The CCIA 20 also maintains a central database of the coupons redeemed so far. 
For each coupon validation request from a redeeming party, it checks if the coupon has 
been used earlier and returns a validity certificate to the retailer accordingly. 

The manufacturer 12 is constituted by three elements: a promotion definition 
equipment 22, a distribution equipment 24, and a clearing equipment 26. 

The promotion definition equipment 22 is usually owned or operated by the 
manufacturer, or their agent undertaking a sales promotion on their behalf It is used by 
the manufacturer to define a promotion scheme. Promotion scheme parameters comprise 
the item, or collective of items to be discounted, the amount of discount, the nature of the 
discount (e,g. free gifts, price packs, loyalty points and order discount), a market segment 
for the promotion scheme, the duration of the promotion scheme, appropriate instance to 
offer the discount, how to offer the discount, and so on. 
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The distribution equipment 24 also usually is owned or operated by the 
manufacturer, or their agent doing sales promotion on their behalf. The equipment 
requests the CCIA 20 for a certain number of coupons for a promotion scheme. It then 
writes the promotion specific information on the coupons received from CCIA 20 and 
5 digitally signs the coupon to make it an authentic certificate. It offers the customized 
coupons to a plurality of customers depending on customer profile and promotion 
scheme. 

The clearing equipment 26 receives redeemed coupons, along with their validity 
10 certificate and other relevant information like proof of sale or sales invoice number, from 
participating retailers. It operates to verify the authenticity of coupons and corresponding 
validity certificate. It then transfers the required amount to the appropriate retailer. 

The retailer's redemption equipment 16 is usually owned by the retailer, which 
15 takes the coupons from the customer for redemption, verifies the authenticity of the 
coupons and obtains a "validity certificate" from the CCIA 20 before giving the discount 
to the customer. 

The practise of the invention will now be described, in general terms with 
20 reference to Fig. 2. 

The manufacturer 12 decides to implement a promotion scheme. The promotion 
definition equipment 22 sends a request to obtain blank coupons to the CCIA 20, in step 
28, as message 1, The definition equipment 22 may be triggered by the manufacturer, a 
25 periodic timer or an external event to obtain blank coupons from the CCIA 20 before 
issuing the coupon to a customer. It may alternatively obtain the blank coupon from the 
CCIA 20 at the time of offering a coupon to a customer* 

In step 30, the CCIA creates and returns the requested number of blank 
30 unforgeable coupons, being message 2. A blank coupon consists of a coupon identifier 
denoted by x, and one way hash functions of x, say f (x) and g (x) , Examples of 
suitable hash functions are the standard algorithms such as SHA, MD5, MD2, etc. These 
one-way hash functions are known only to the CCIA 20 to ensure that a blank coupon 
cannot be forged. 

35 
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The distribution equipment 24 then adds promotion details obtained from the 
promotion definition equipment to the blank coupons. The promotion details are referred 
to as the customization information. The distribution equipment digitally signs g(x) and 
the customization information. Thus the coupon offered to the customer comprises of x, 
5 f(x), sign_manufacturer(^f3t:^, customization_infojsigned _part, optional_info). This is 
message 3. The optional information inside the signed portion is the optional information 
from message 2, 

The purpose of this format is to ensure that no one but the CCIA 20 shall be able 
10 to verify the authenticity of the coupon. The coupon comprises of a signed part and an 
unsigned part. The signed part can be verified by anyone knowing the manufacturer's 
public key, without the help of CCIA. But the unsigned part (i.e. x, f (x)) can be 
authenticated only by the CCIA, as only the CCIA knows the function f (x) . This 
explains the reason to keep x, f (x) outside the manufacturer's signature. The reason for 
15 keeping g{x) inside the manufacturer signature is to prevent coupon mismatch. For 
instance, a customer could take the signed part of one coupon and attach it to the 
unsigned part of another coupon to make a new coupon. This new coupon will look like 
any valid coupon to the retailer and the CCIA. This allows the defaulter to take a coupon 
with high discount and replace its x, f (x) , g (x) part by a low discount value coupon's 
20 X' , f (xM and g (x' ) . If the g (x) is unsigned, then CCIA 20 cannot prevent coupon 
mismatch frauds. Whereas if the g (x) is inside the signed part, the mismatch can be 
detected by checking g(x) inside the manufacturer's signature and f (x) outside the 
signature. 

25 The manufacturer 12 now distributes the coupons to the appropriate customers in 

step 32. 

The customer 'takes' the coupon to the Retailer 16, and presents the coupon to 
avail of the discount it offers, in step 34, The Retailer, in step 36, verifies the 

30 manufacturer's signature on the coupon, to ensure the coupon has not been tampered 
with. This verification is performed by public key cryptography. The manufacturer signs 
using his private key and the retailer verifies the signature and the integrity of the content 
signed by using the manufacturer's public key. The retailer then sends the coupon to the 
CCIA 20, in step 38. In step 40, the CCIA first checks whether the received f (x) and 

35 g(x) are indeed the correct hash functions of the received X. If this is correct, it implies 
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that the coupon is authentic. Then it determines whether the coupon with the identifier 
'x' has already been redeemed. If it has not been redeemed earher, the coupon is entitled 
for the mentioned discount, and the CCIA 20 returns a positive validity certificate to the 
Retailer 16 as message 6 in step 42. If it has been redeemed earlier the CCIA returns a 
5 negative validity certificate to the retailer. The Retailer, in redeeming the coupon, now 
has a validity certificate from the CCIA, meaning that there is no chance of fraudulent 
redemption, however, the issuing manufacturer 12 is now vulnerable to cross-coupon 
honoring attacks. 

10 To prevent cross-coupon honoring, in step 44, the issuing manufacturer 12 

authorises the CCIA 20 to charge an amount $X (that may depend on the coupon value) 
from the redeeming Retailer 16. In step 46, the CCIA 20 transfers this amount to the 
issuing manufacturer 12. The retailer may now give the customer the discount for the 
requested goods or services. 

15 

A clearance process step 48, then occurs, where proof of purchase must be 
established. The retailer 16 presents redeemed coupons to the manufacturer's clearing 
equipment 26 along with the respective certificate. If decision step 48 returns true (yes), 
processing continues in step 50, the $X is then refunded, together with the discounted 
20 amount. Processing then terminates. Otherwise, if decision step 48 returns false (no), 
processing terminates. 

Consider, though, if the redeeming Retailer attempts to gain compensation from 
a competing manufacturer (i.e. the cross-coupon honoring manufacturer). In such a case 

25 there will be no proof of purchase (step 48), and the Retailer 16 has no motivation to 
reimburse Retailer A. Of course, the cross-coupon honoring manufacturer 22 may choose 
to reimburse Retailer A without proof of purchase or a validity certificate, but the 
reimbursement is not for the additional $X that Retailer A paid to the CCIA 20 for the 
validity certificate. If the manufacturer 22 attempts to reimburse the $X as well, this 

30 results in losses. Also, the Retailer could ask for any amount which may be >$X, 
compounding the losses. 

The methodology described will not achieve its objective if the redeeming party 
doesn't need to go to the CCIA 20 for a validity certificate. The unforgeable blank 
35 coupon and the signed customised coupon should be such that coupon verification can not 
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be done without the CCIA's involvement. 



The message content in the centraHsed on-line verification system is described 
below. Here, the coupon id is denoted by 'x'. The functions f (x) and g{x) are 
5 one-way hash functions on the coupon id. Also, sign_identity (text) denotes 
text that has been digitally signed by the identity. 



Message Number 

Message 1 
Message 2 
Message 3 



Message 4 
Message 5 
Message 6 



Message Content 

number of coupons, optional_inf ormat ion 
X, f (x) , g(x), optional_inf ormation 
X, f (x) , customization_inf ormat ion_l , 
sign_manuf acturer (g (x) , 
customization_inf ormat ion_2 , 
opt ional_inf ormat ion ) 
same as message 3 , 
same as message 3 . 

sign_CCIA(x, valid/ invalid, time_stamp, 
opt ional_inf ormation) 



10 In another embodiment of this invention, the clearing equipment 26 may also 

know the one-way hash functions used by the CCIA 20. This will enable the clearing 
equipment 26 to authenticate the coupon presented for clearing, without having to go to 
the CCIA 20 for verifying coupon authenticity. 

15 In another embodiment of this invention, the distribution equipment 24 splits the 

customization_infonnation in two parts. The distribution equipment digitally signs g (x) 
and one part of the customization information. Thus the coupon offered to the customer 
comprises of x, f (x) , unsigned part of customization_inf o, 
sign_manuf acturer (g (x) , customization_inf o__signed_part , 

20 optional_inf o) . This is message 3. The optional info inside the signed portion is 
the optional information from message 2. The reason for keeping part of the 
customization information outside the manufacturer's signature is to increase the 
uncertainty about the coupon's genuineness for a cross-coupon manufacturer. The 
cross-coupon manufacturer can maintain a database of (x, f (x) ) for the coupons 

25 redeemed so far. If complete customization information is kept inside the signature, the 
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cross coupon manufacturer can be sure of the promotion parameters as they are inside the 
manufacturer's signature. But since it doesn't know the one-way hash functions f (x) 
and g (x) , it cannot prevent double (or muhiple) spending. The customers can make any 
combination of two numbers as x, f (x) and combine with the signed part to create a 
5 fake coupon. 

At the other extreme, if all the customization information was kept outside the 
signature, then the cross-coupon manufacturer would not be sure about anything (i.e., 
discount amount, validity period, etc.) but the CCIA 20 also needs to know the unsigned 
10 customization information to be able to authenticate a coupon. The tradeoff here is the 
amount of customization information that CCIA needs to be aware of and the desired 
ambiguity of the coupon parameters to the cross coupon manufacturer. 

In another embodiment of this invention, all the messages may carry time stamps 
15 in order to prevent the retailer/cross coupon honoring manufacturer from manipulating 
the documents for cross coupon honoring. 

In another embodiment of this invention, the CCIA may be working only for one 
manufacturer. 

20 

In another embodiment of this invention, the promotion definition equipment 22, 
the distribution equipment 24, and the clearing equipment 26 may be operated by a third 
party for a plurality of manufacturers. Each manufacturer has an account with the service 
provider and uses the services from browser or such similar tool. 

25 

The foregoing describes only a few arrangements and embodiments of the 
claimed invention, and modifications and/or changes can be made thereto without 
departing fi-om the scope and spirit of the invention, the arrangements and embodiments 
being illustrative and not restrictive, 

30 

For example, there can, in an electronic commerce system, be many issuing 
parties and many redeeming parties, such that certain redeeming parties will have 
redemption arrangements with certain of the issuing parties, and yet be discouraged from 
cross-coupon honoring, 

35 



JP920000227US] 



[I:\ELEC\IBM\5 13555US\5 !3555US_finaLlwp 



